explorer acting funny

I have followed the instructions for basic removal. My problems first began with a message in boot: c:\windows\system32\digeste.dll is not a valid windows image. This message is gone now, but explorer is still acting stange. I open a window, type a new address in the address bar and a new explorer will open. After a third eplorer attemts to open, they will all crash. I will post this and try to upload my lgs after because if not explorer will not let me continue. When I ran all the tools mantioned a few items were found and removed. What shall I do next?

 

my log files

 

third post for logs

 

Welcome! to MajorGeeks.com!


Pre-Instructions:

1. First, please disable any antivirus and/or antispy programs you have installed so they will not block this fix.
   
2. Print out these instructions or save them to a text file so that you can operate with All Browser Windows CLOSED.

Step 1:

Run C:\MGtools\analyse.exe by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator). This is really HijackThis (select Do a system scan only) and select the following lines but DO NOT CLICK FIX until you exit all browser sessions including the one you are reading in right now:

Again, make sure ALL browser windows are closed when you click FIX.​

Step 2:

Now we need to use ComboFix to remove a bunch of malware files.

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Open Notepad and copy/paste the text in the below quote box into it:

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.​

Step 3:

Default Security Settings

To Default Security Settings:
For Internet Explorer 6 users:
Click Start > Run > type inetcpl.cpl and press ENTER, when Internet Properties comes up navigate to the Security Tab and click Default Level for the following:

• Internet
• Local Intranet
• Trusted Sites
• Restricted Sites.

Click OK to exit.

For Internet Explorer 7 users:
Click Start > Run > type inetcpl.cpl and press ENTER, when Internet Properties comes up, navigate to the Security Tab and simply click the "Reset all zones to default level" button. Click OK to exit.

NOTE: If it's "grey" then it's already at the default level.​

Step 4:

Please download ATF-Cleaner by Atribune. This program does not require an installation. The executable actually runs the program.

NOTE: ATF-Cleaner will remove all files from the items that are checked so if you have some cookies you'd like to save. Please move them to a different directory.

• Double-click ATF-Cleaner.exe to run the program.
• Under Main choose: Select All
• Click the Empty Selected button.

If you use Firefox browser

• Click Firefox at the top and choose: Select All
• Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

If you use Opera browser

• Click Opera at the top and choose: Select All
• Click the Empty Selected button.
  • NOTE: If you would like to keep your saved passwords, please click No at the prompt.

Click Exit on the Main ATF-Cleaner menu to close the program.​

Step 5:

Finally, run the C:\MGtools\GetLogs.bat file by double clicking on it (Note: if using Vista, don't double click, use right click and select Run As Administrator).

Then attach the below logs:

• C:\ComboFix.txt
• C:\MGlogs.zip

​

Let me know of any problems you may have encountered with the above instructions and also let me know how things are running now.

 

Thank you for your help. I followed the instructions and I am attaching my files. Explorer still acting out. If I type an address in the address bar, a new window opens. If I click a link it goes to the page of the link without opening a new window; it is only when I type a new address in the bar. Sometimes it tries to opem more than one window, sometimesw 20 or more, so it crashes. As a matter of fact it was quite difficult to get to this page and post back. Now I am not sure as to how to attach my files if I can't do it here should I start a new thread?

 

Can't attach my files!!! :cry When I click on manage attachments a new window opens and it then freezes. Should I copy these files to another computer and post them from there? Don't know if this could infect the other computer.

 

still unable to post logs please help

I am trying to post 2 new logs as instructed in previous thread, but when I click on manage attachments a new window opens and it just freezes. I am opening this new thread in the hope of being abe to attach my files. On typing a new URl in the address bar explorer opens a new window and if I type a third one explorer opens a third window and crashes. So I assume explorer is also crashing when trying to attach files. Is there another way to oattach my files? Thanks!!

 

Re: still unable to post logs please help

YEY!!! It worked. Here are my files as asked for in my first post